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DETAILED ACTION 

This office action is responsive to communication filed on 10/312001 . 

Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-6, 10, 14, 15, 16, 17 and 18 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Vahalia et al (U.S. Patent No. 6,625,591) in view of OToole, 
Jr. et al (U.S. Patent No. 6,279,1 12). 

Regarding claim 1: Vahalia et al disclose the invention substantially as claimed. 
Vahalia et al teach a method for transforming one or more lists for a data 
communications system into a single list, each list of the one or more lists including a 
plurality of entries, the method comprising: 

removing non-terminating entries from the plurality of entries in the one or 
more lists, the removing each non-terminating entry removing all but a last non- 
terminating entry in any of the one or more lists (fig. 4, items 61-64; column 6, lines 
7-27)\ and 

eliminating from the plurality of entries one or more entries that provide for 
one or more impossible actions (column 6, lines 7-17)] 
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Vahalia et al further teach the removing of non-terminating entries and the 
eliminating of one or more entries that provide for impossible actions {column 6, lines 7- 
17; note the impossible action is when trying to remove the last entry or make the last 
entry equal to zero), but fail to teach producing a single list preserving tracing of the 
entries in the single list to the plurality of entries. 

In the same field of endeavor, OToole, Jr. et al teach "a method to permit the 
inquiry of which access tickets (entries) are in the user's access control list and to 
display the icons corresponding to each of the access tickets..." [see O'Toole, Jr.; 
column 6, lines 27-31]. 

Accordingly, it would have been obvious to one of ordinary skill in the networking 
art at the time the invention was made to have incorporated OToole, Jr. et al's 
teachings of the racing of the entries in the list with the teachings of Vahalia et al, for 
the purpose of improving the ability of a network "...to allow access to the directory to 
satisfy file access requests for searching .."as stated by Vahalia in lines 35-38 of column 
2. 

Regarding claim 2: The combination Vahalia - OToole, Jr. discloses the 
method of Claim 1 wherein each of the plurality of entries provides an indication of a 
source of the entry with an action code to create a pairing [see Vahalia; column 5, lines 
40-67]. By this rationale claim 2 is rejected. 
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Regarding claim 3: The combination Vahalia - OToole, Jr. discloses the 
method of Claim 1 wherein the preserving tracing permits determining statistical 
parameters of the data communication system [see Vahalia; column 5, lines 40-67\. By 
this rationale claim 3 is rejected. 

Regarding claim 4: The combination Vahalia - OToole, Jr. discloses the 
method of Claim 3 wherein the statistical parameters include counts of matched entries 
[see Vahalia; column 5, lines 40-67\. By this rationale claim 4 is rejected. 

Regarding claim 5: The combination Vahalia - OToole, Jr. discloses the 
method of Claim 1 wherein the removing and the eliminating is performed at a network 
element of the data communication system [see Vahalia; fig. 4, items 61-68; column 6, 
lines 7-27]. By this rationale claim 5 is rejected. 

Regarding claim 6: The combination Vahalia - OToole, Jr. discloses the 
method of Claim 1 wherein the list of entries is an Action Control 
List (ACL) and wherein each entry is an Action Control Entry (ACE) [see OToole, Jr.; 
column 4, lines 10-16]. By this rationale claim 6 is rejected. 

Regarding claim 10: The combination Vahalia - OToole, Jr. discloses a data 
routing system to administer entries, the data routing system comprising: 

a network element configured to receive a plurality of Action Control Lists 
(ACLs) organized to hold a plurality of Action Control Entries 
(ACEs) [see Vahalia; fig. 1, items 24-26; column 3, lines 61-67]] 

a processor configured to receive the plurality of ACLS holding the plurality of 
ACES [see Vahalia; fig. 1, item 22], the processor adapted to: 
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remove any non-terminating entries from the plurality of ACES in the 
plurality of ACLS, wherein the removal of each non-terminating entry removes all but a 
last non-terminating entry in any of the ACLS [see Vahalia; fig. 4, items 61-64; column 
6, lines 7-27]; and 

eliminate from the ACES one or more ACES that provide for one or more 
impossible actions if present, wherein the removal of non terminating entries and the 
elimination of one or more ACES that provide for impossible actions produce a single 
list with entries, the single list configured to preserve tracing of the entries in the single 
list to the plurality of ACES [see Vahalia; column 6, lines 7-17], and [see O'Toole, Jr.; 
column 6, lines 27-31]. By this rationale claim 10 is rejected. 

Regarding claim 14: The combination Vahalia - O'Toole, Jr. discloses the data 
routing system of Claim 10 wherein the one or more ACES provide for a plurality of 
actions [see O'Toole, Jr.; column 5, lines 45-67]. By this rationale claim 14 is rejected. 

Regarding claim 15: The combination Vahalia - O'Toole, Jr. discloses the data 
routing system of Claim 10 wherein the one or more ACES provide for one or more of: 

encryption and decryption, web caching, tunneling, redirection to a 
predetermined router interface, redirection to a separate processor or line card for one 
or more of the encryption, decryption, web caching, and tunneling [see O'Toole, Jr.; 
column 6, lines 16-31]. By this rationale claim 15 is rejected. 
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Regarding claim 16: The combination Vahalia - OToole, Jr. discloses a 
computer system comprising: 

a processor [see Vahalia; fig. 1, item 22]] and 

a memory, the memory including instructions, the processor for executing the 
instructions, the instructions including encoding instructions for one or 
more lists, each list including a plurality of entries [see Vahalia; fig. 1, item 20-26; 
column 3, lines 60-67; column 4, lines 1-54], the encoding instructions including: 

skip entry removal instructions for removing non-terminating entries 
from the plurality of entries in the one or more lists, the removing each non-terminating 
entries removing all but a last non-terminating entry in any of the one or more lists [see 
Vahalia; rig. 4, items 61-64; column 6, lines 7-27]] and 

impossibility entry elimination instructions for removing from the plurality of 
entries one or more entries that provide for one or more impossible actions, wherein the 
removal of non-terminating entries and the removal of one or more entries that provide 
for impossible actions produce a single list preserving tracing of the entries in the single 
list to the plurality of entries [see Vahalia; column 6, lines 7-17], and [see OToole, Jr.; 
column 6, lines 27-31]. By this rationale claim 16 is rejected. 
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Regarding claim 17: The combination Vahalia - OToole, Jr. discloses a 
computer program product, the computer program product comprising : 

signal bearing media bearing digital information adapted to include 
programming, the digital information including: 

a block configured to remove non-terminating entries from the plurality of entries 
in the one or more lists, the removing each non-terminating entry removing all but a last 
non-terminating entry in any of the one or more lists; and 

a block configured to eliminate form the plurality of entries one or more entries 
that provide for one or more impossible actions; wherein: 

the removal of non-terminating entries and the elimination of one or more entries 
that provide for impossible actions produce a single list preserving tracing of the entries 
in the single list to the plurality of entries [see Vahalia; column 6, lines 7-1 7\, and [see 
OToole, Jr.; column 6, lines 27-31]. By this rationale claim 17 is rejected. 

Regarding claim 18: The combination Vahalia - OToole, Jr. discloses a 
network element configured to transform one or more lists for a network, each list 
including one or more entries, the network element comprising: 

means for removing non-terminating entries from the one or more entries in the 
one or more lists, the removing each non-terminating entry removing all but a last non- 
terminating entry in any of the one or more lists [see Vahalia; fig. 4, items 61-64; column 
6, lines 7-27]] and 

means for eliminating from the one or more entries each entry that provides for 
one or more impossible actions, wherein the means for removing of non-terminating 
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entries and the means for eliminating each entry that provides for impossible actions 
provide a means for producing a single list preserving tracing of the entries in the single 
list to the one or more entries [see Vahalia; column 6, lines 7-17], and [see O'Toole, Jr.; 
column 6, lines 27-31]. By this rationale claim 18 is rejected. 

3. Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over Vahalia et 
al (U.S. Patent No. 6,625,591) and OToole, Jr. et al (U.S. Patent No. 6,279,112), in 
view of Ng et al (U.S. Patent No. 5,838,874). 

Regarding claim 7: The combination of Vahalia - OToole, Jr. discloses the 
invention substantially as claimed. The combination teaches the method of Claim 1 
wherein the one or more lists of data are action control lists (ACLs), the method further 
comprising the step of combining at least a first and a second ACL by combining each 
non-terminating entry in a first ACL with each entry in a second ACL [see O'Toole, Jr.; 
column 8, lines 49-63]; However the combination fails to disclose repeating the 
combining recursively to a third or more ACLS, if present, until each ACL is collapsed 
into the first ACL to create the single list . 

In the same field of endeavor, Ng et al disclose".. a recursive process to combine 
frames and using an interpolation in the frames from first to last... "[see Ng; column 35, 
lines 45-67]. , 

Accordingly, it would have been obvious to one of ordinary skill in the networking 
art at the time the invention was made to have incorporated Ng's teachings of using a 
recursive process on the ACLs with the teachings of Vahalia - OToole, Jr. for the 
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purpose of improving the ability of a network "...to a//otv access to the directory to 
satisfy file access requests for searching .."as stated by Vahalia in lines 35-38 of column 
2. 

4. Claims 8 and 9 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Vahalia et al (U.S. Patent No. 6,625,591), OToole, Jr. et al (U.S. Patent No. 6,279,1 12), 
and Ng et al (U.S. Patent No. 5,838,874), in view of Kloth et al (U.S. Patent No. 
6,643,260) 

Regarding claim 8: The combination of Vahalia - OToole, Jr.- Ng discloses the 
invention substantially as claimed. The combination teaches the method of Claim 7 , 
but fails to teach the single list holds a plurality of Action Control Entries (ACEs) that are 
codeable into a first match engine capable of computing a large number of Boolean 
expressions in parallel and returning an index of first matching ACES. 

In the same field of endeavor, Kloth et al disclose "... a data vector engine in a 
TCAM to resolve matching, giving priority to the first match to provide a way of 
returning an index of the first matching.." [see Kloth; column 8, lines 28-67; column 9, 
lines 1-37\. 

Accordingly, it would have been obvious to one of ordinary skill in the networking 
art at the time the invention was made to have incorporated Kloth et al's teachings of 
combining the ACL and the first matching engine with the teachings of Vahalia - 
OToole, Jr.- Ng for the purpose of improving the ability of a network "...to allow access 
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to the directory to satisfy file access requests for searching .."as stated by Vahalia in 
lines 35-38 of column 2. 

Regarding claim 9: The combination of Vahalia - OToole, Jr. - Ng - Cloth 
discloses the method of Claim 8 wherein the first match engine is implemented 
as one of a ternary content addressable memory (TCAM) and a hardware device 
capable of computing a large number of Boolean expressions in parallel and returning x 
an index of first matching ACES [see Kloth; column 8, lines 28-67; column 5, lines 46- 
67; column 6, lines 1-16]. By this rationale claim 9 is rejected. i 

5. Claims 11,12, and 13are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Vahalia et al (U.S. Patent No. 6,625,591) and OToole, Jr. et al (U.S. Patent No. 
6,279,1 12), in view of Kloth et al (U.S. Patent No. 6,643,260). 

Regarding claim 11: The combination of Vahalia - OToole, Jr.- Kloth discloses 
the invention substantially as claimed. The combination teaches the data routing 
system of Claim 10, but fail to expressly disclose a hardware device coupled to receive 
the single list with entries, the hardware device being a parallel-first match engine. 

In the same field of endeavor, Kloth et al disclose "... a TCAM aggregate table .." 
[see Kloth; column 8, lines 28-67; column 9, lines 1-37]. 

Accordingly, it would have been obvious to one of ordinary skill in the networking 
art at the time the invention was made to have incorporated Kloth et al's teachings of a 
TCAM with the teachings of Vahalia - OToole, Jr. for the purpose of improving the 
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ability of a network "...to allow access to the directory to satisfy file access requests for 
searching .."as stated by Vahalia in lines 35-38 of column 2. 

Regarding claim 12: The combination of Vahalia - OToole, Jr.- Kloth teaches 
the data routing system of Claim 1 1 wherein the hardware device is one of a content 
addressable memory and a ternary content addressable memory [see Kloth; fig. 4A, 
item 88; column 118, lines 77-35]. By this rationale claim 12 is rejected. 

Regarding claim 13: The combination of Vahalia - OToole, Jr.- Kloth teaches 
the data routing system of Claim 1 I wherein the single list with entries is coded for 
presentation to the hardware device [see Kloth; column 118, lines 17-35\. By this 
rationale claim 13 is rejected. 



- Application/Control Number: 1 0/001 ,61 5 Page 1 2 

Art Unit: 2143 

Conclusion 

6. Any inquiry concerning this communication or earlier communications from 
examiner should be directed to Jude Jean-Gilles whose telephone number is (571 ) 272- 
3914. The examiner can normally be reached on Monday-Thursday and every other 
Friday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David Wiley, can be reached on (571) 272-3923. The fax phone number for 
the organization where this application or proceeding is assigned is (703) 305-3719. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 




